Re: Colour me confused.
Because it's open to interpretation. The US and the EU have come up with various wheezes to allow processing of data in the US and they have repeatedly been struck down by the courts as providing insufficient protection, not least from warrantless US governement request for access. Google has made a version of analytics that supposedly limits the data collected, but mere act of processing data in the US remains a problem.